Skip to content
OpenAdvisories

Vendor

iterative

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Low 2.5

    DataChain: Deserialization of Untrusted Data from Environment Variables

    DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and below allow for deseriaization of untrusted data because of the way the DataChain library reads serialized objects from environment variables (…

  • Low 3.3

    Unsafe YAML deserialization in PyDrive2

    PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbitrary code execution. A maliciously crafted YAML file can cause arbitrary code execution if PyDrive2…